6916 matches found
The vulnerability of the ha_maria::extra component in the MariaDB database, which allows a hacker to cause a service failure.
The vulnerability of the hamaria::extra component in the MariaDB database is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability of the sql_parse.cc component of the MariaDB database, which allows attackers to trigger a service failure.
The vulnerability of the sqlparse.cc component in the MariaDB database system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability of the InnoDB component in the MariaDB database allows a perpetrator to compromise data integrity and cause service failures.
The vulnerability of the InnoDB component in the MariaDB database relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...
The vulnerability of the MariaDB database, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of the MariaDB database is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a hacker to cause service failures...
mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs i.e., going to the err label while executing the method createworkerthreads, the held lock thd-ctrlmutex is not released correctly, which allows local users to trigger a denial ...
mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c
A flaw was found in the MariaDB Server. A use-after-free in the component, mystrcasecmp8bit, can be exploited via specially crafted SQL statements, impacting availability...
mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exectimetracker::getloops/Filesorttracker::reportuse/filesort...
mariadb: server crashes in query_arena::set_query_arena upon SELECT from view
A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlclass.cc, impacting availability...
mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer
MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
mariadb: use-after-poison in Binary_string::free_buffer
A flaw was found in the MariaDB Server. It contains a use-after-free via the component,Binarystring::freebuffer at /sql/sqlstring.h, affecting availability...
mariadb: server crash in Item_args::walk_args
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemargs::walkargs...
mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...
mariadb: server crash at Item_subselect::init_expr_cache_tracker
MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Itemsubselect::initexprcachetracker...
mariadb: CONNECT storage engine heap-based buffer overflow
A flaw was found in MariaDB. Lack of input validation leads to a heap buffer overflow. This flaw allows an authenticated, local attacker with at least a low level of privileges to submit a crafted SQL query to MariaDB and escalate their privileges to the level of the MariaDB service user, running...
mariadb: assertion failures in decimal_bin_size
A flaw was found in the MariaDB Server. It contains a global buffer overflow in the component, decimalbinsize, which is exploited via specially crafted SQL statements, impacting availability...
mariadb: lack of validating the existence of an object prior to performing operations on the object
MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...
mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc
A flaw was found in the MariaDB Server. It contains a use-after-free in the component, VDec::VDec at /sql/sqltype.cc, affecting availability...
mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs pthreadcreate returns a nonzero value while executing the method createworkerthreads, the held lock is not released correctly, which allows local users to trigger a denial of...
mariadb: use-after-poison in Binary_string::free_buffer
A flaw was found in the MariaDB Server. It contains a use-after-free in the component, Binarystring::freebuffer at /sql/sqlstring.h, affecting availability...
mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used
A use-after-free vulnerability was found in MariaDB. This flaw allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used, resulting in a denial of service...